« previous next »
Pages: [1]   Go Down

Author Topic: FP? HPZipm12.exe detected as rootkit  (Read 1444 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
FP? HPZipm12.exe detected as rootkit
« on: November 27, 2014, 12:33:47 AM »
I was awakened this morning by Avast declaring, while running its daily scan, that a rootkit had been detected! The file in question was HPZipm12.exe, last modified in 2007 & on the system since 2008. Off I go to VirusTotal...

Someone had uploaded & scanned it earlier today with 1/56 detections, Avast being the only one. I scanned it again anyway & now it shows 2/56, Avast & NANO-Antivirus. Results at https://www.virustotal.com/en/file/465c0772e23f7959ec71dccfa3304e2e46fd31548ae37d7ba3daaa59e6b561fd/analysis/1417041695/

Next to Jotti: 1/21 - only Avast detected anything. http://virusscan.jotti.org/en/scanresult/78dc0a7281098654c4eaed51f57b2a437bb487abhttp://virusscan.jotti.org/en/scanresult/78dc0a7281098654c4eaed51f57b2a437bb487ab

I believe this is an FP. Would you please look into it? Let me know if you need anything else from me. Thanks!
Logged

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: FP? HPZipm12.exe detected as rootkit
« Reply #1 on: November 27, 2014, 01:20:26 AM »
Submit a ticket to avast about it.
Mention why you believe it is a (possible) FP and send them the file.
Please use the search option before posting.
Things like this have been explained many times before.
Logged
Pages: [1]   Go Up
« previous next »